Information on the processing of personal data
(articles 13 and 14 EU Regulation 2016/679)
Dear Sir / Madame,
In accordance with the provisions of EU Regulation 679/2016 ("Regulation"), in relation to personal data concerning you or concerning the company for which you are acting by virtue of a specific mandate with representation and which will be the subject of the processing, we inform you of the following:
​
1. Purpose of the treatment
The personal data you provide, also with reference to the particular data referred to in art. 9 of the Regulations, are processed by our Company and / or by our agents, for the following purposes:
a) to carry out its activity in execution, management, conclusion, fulfillment of pre-contractual and contractual relationships in place with you, to provide the assistance requested by you or in your favor envisaged, as well as for the performance of strictly connected activities ;
b) for the fulfillment of the obligations established by laws, regulations, provisions issued by supervisory and control authorities and bodies;
c) for verifying user satisfaction with regard to the services used;
d) for direct marketing purposes: this term means the will to carry out promotional and / or marketing activities towards you. This category includes all the activities carried out to promote products, services, sold and / or provided by the Data Controller, including the segmentation activity according to the services you have acquired and / or which you have used;
e) in anonymised form, and therefore not attributable to the interested party, for analysis and statistics;
​
​ 2. Processing methods
The processing in question is carried out according to the methods provided for by EU Regulation 2016/679, also by means of IT and automated tools, not exhaustively through collection, registration, organization, storage, processing, selection, comparison, use, interconnection operations. , consultation, communication, cancellation, destruction, blocking of data, according to the principles of safety / security protection, accessibility, confidentiality, integrity. The same data are processed and held in accordance with the mandatory provisions of the law, within the limits and in the manner specified by the same. The processing is carried out directly by the organization of the Data Controller and by subjects external to this organization, belonging to the distribution chain of the insurance sector, delegated as agents / managers of the same company and / or subjects strictly connected to the functioning of the same and / or to carry out the activities contractually envisaged and requested by you
​
3. Provision of data
a) We inform you that the provision of personal data relating to you, even of a particular nature, is necessary for the conclusion and management of the contract and for the best execution of the contractual services envisaged in your favor, as well as for the performance of strictly connected activities. the fulfillment of these services, also with reference to the sending of medical reports or prescriptions;
b) The provision of data may be mandatory on the basis of law, regulation, community legislation. Any refusal of the express consent to the processing of the data referred to in point 1a) makes it impossible to conclude or execute the contract and / or to perform the services requested by you, or in your favor contractually provided;
c) The legal basis for the management of the purpose indicated in point 1b) is the need to fulfill a legal obligation to which the data controller is subject;
d) The legal basis for the management of the purpose indicated in point 1c) falls within the legitimate interest of the Data Controller;
e) The provision of personal data for the purposes of information and commercial promotion of the services, as indicated in point 1d) is optional and failure to provide it does not entail consequences in relation to the contractual relationship;
f) The processing of data for the purposes referred to in point 1e) does not fall within the scope of the legislation;
4. Subjects or categories of subjects to whom the data may be communicated
The data may be communicated - in Italy and abroad - to specific subjects considered recipients of your personal data in order to correctly carry out all the processing activities necessary to pursue the purposes referred to in this Notice. For the purposes referred to in point 1a) to companies of the FD Holding Group subjects external to the distribution chain of the company who carry out activities connected and instrumental to the management of the contractual relationship, such as correspondents, health organizations, medical and paramedical personnel, trusted personnel, for other subjects in the insurance sector, such as insurers, co-insurers, reinsurers, agents, sub-agents, brokers, agency producers, insurance brokers and other channels for the acquisition of insurance contracts, banks, investment firms, lawyers, experts, service companies to which they are entrusted the management, settlement and payment of services, business consultancy companies, consultants, professional firms, associative bodies and consortiums of the insurance sector, data and service management bodies, credit recovery companies, entities and bodies that carry out electronic management of data and means of payment, companies that carry out activities of st ampa, transmission, enveloping, transport and sorting of communications to customers, documentation archiving services and companies specialized in data entry services, supply of IT services, administrative and accounting management services, through subjects appointed by the company. The same data may be communicated for the purposes referred to in point 1 b) to subjects to whom the communication is mandatory by law, within the limits and for the purposes provided for by the same law, public bodies and supervisory bodies, public and private subjects to whom they are delegated in accordance with current legislation functions of public importance, associative bodies and consortiums of the insurance sector and therefore, by way of example, ANIA, IVASS, Ministry of Industry, Commerce and Crafts, CONSAP, UCI, Supervisory Commission pension funds, the Ministry of Labor and Social Security or other databases to which the communication of data is mandatory (eg Italian Office of Central Accident Records, Motor Vehicles and concession transport). The data may then be disclosed for the purposes referred to in points 1 c) and 1 d), to companies of the FD Holding Group (parent companies, subsidiaries and affiliates, even indirectly in accordance with current legal provisions), in charge of the FD Holding Group. . Furthermore, for the purposes referred to in point 1 e), the data may be disclosed to third parties.
5. Rights of the interested party in relation to the processing of personal data
Pursuant to art. 15 and following of the Regulations, we inform you that you have the right:
access to personal data;
to obtain the correction or cancellation of the same or the limitation of the treatment that concerns him;
to oppose the treatment;
to data portability;
to withdraw consent;
to lodge a complaint with the supervisory authority (Privacy Guarantor) following the procedures and indications published on the official website of the Authority at www.garanteprivacy.it .
The exercise of the rights is not subject to any formal constraint and is free, except for the provisions of articles 12 paragraph 5 in case of manifestly unfounded or excessive request and 9, paragraph 5 and 10 paragraphs 7 and 8, in case of request for more "copies" of personal data.
To exercise these rights, you can directly contact International Care Company SpA based in Via Paracelso 24 - 20864 Agrate Brianza (MB) - Tel. 039 6056804 - privacy@fdholding.it
​
6. Data retention times and other information
Your data will be processed for the entire duration of this contractual relationship and will be kept in compliance with the principle of proportionality and in any case until the purposes of the processing have been pursued and until - if previously - the withdrawal of consent occurs.
Your personal data will be processed by the Data Controller within the territory of the European Union. All necessary precautions will therefore be taken in order to guarantee the most complete protection of your personal data by basing this transfer: (a) on adequacy decisions of the recipient third countries expressed by the European Commission; (b) on adequate guarantees expressed by the third party recipient pursuant to Article 46 of the Regulation; (c) on the adoption of corporate binding rules.
In any case, you may request more details from the Data Controller if your personal data have been processed outside the European Union, requesting evidence of the specific guarantees adopted.
7. Data Controller and Data Protection Officer (DPO)
The data controller is International Care Company SpA with registered office in Via Paracelso 24 - 20864 Agrate Brianza (MB) in the person of the legal representative. The list of Data Processors (if appointed) and the DPO can be found at the aforementioned office.
In order to facilitate relations with the interested parties, the Company has adopted the figure of the Data Protection Officer (DPO), pursuant to art. 37 of EU Regulation 2016/679. The DPO is available for any information concerning the processing of personal data carried out by the Data Controller. You can contact the DPO by writing to: privacy@fdholding.it